Tag: cloud

All the articles with the tag "cloud".

• Kicking the Bucket: Critical RCE and Cross-Tenant Exploits in 3 Different GCP Products

  14 Apr, 2026

  How my bucket-squatting research uncovered three cross-tenant vulnerabilities - GeminiSquat (CVE-2026-1727), MountSquat and VertexSquat (CVE-2026-2473) - affecting Gemini Enterprise, Cloud Run, and Vertex AI.

• GatewayToHeaven: Finding a Critical Cross-Tenant Exploit in GCP's Apigee

  28 Jan, 2026

  A technical step-by-step writeup about finding CVE-2025-13292, a cross-tenant vulnerability in Google Cloud's Apigee. This vulnerability allowed an attacker to gain read/write access to verbose cross-tenant access logs and analytics data that could contain access tokens of end users.